CVE-2022-20398: Multiple users join the WI-FI network by scanning the QR code
Summary
CVE-2022-20398: In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass. Affects platform/packages/modules/Wifi across 2 version ranges.
>= 13:0, < 13:2022-09-01
>= 13-next:0, < 13-next:2022-09-01
Fixed in 13-next:2022-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/packages/modules/Wifi in the Android ecosystem. This package is responsible for managing Wi-Fi functionality on Android devices. It provides APIs and services for connecting to Wi-Fi networks, configuring network settings, and handling network-related events. The vulnerability in this package allows multiple users to join a Wi-Fi network by scanning a QR code, bypassing the necessary permissions. This can lead to a local escalation of privilege, where a guest user can configure Wi-Fi without the required privileges. Exploitation of this vulnerability does not require user interaction.
Vulnerability Detail
The vulnerability (CVE-2022-20398) originates from the addOrUpdateNetwork function in WifiServiceImpl.java. Due to a permissions bypass, guest users can configure Wi-Fi settings, which should only be allowed for privileged users. This vulnerability can be exploited locally, requiring execution privileges from the User. The impact of this vulnerability is a potential escalation of privilege, where unauthorized users can gain control over Wi-Fi settings. This can lead to unauthorized network access, data interception, and other malicious activities.
How To Fix
Minimum fixed version
13-next:2022-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability (CVE-2022-20398) in the platform/packages/modules/Wifi package allows unauthorized users to configure Wi-Fi settings, leading to a potential escalation of privilege. It is crucial to apply the provided fix from the Android Open Source Project to address this vulnerability. Updating to version 13 (released on or after September 1, 2022) should mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Wifi →
FAQ
The impact of this vulnerability is a potential escalation of privilege, where unauthorized users can gain control over Wi-Fi settings. This can lead to unauthorized network access, data interception, and other malicious activities.
No, user interaction is not needed for exploitation of this vulnerability.
The severity of this vulnerability is classified as High.
There are no known instances of this vulnerability being exploited at the time of this report.
You can use Vulert Playground (https://vulert.com/scanner) to check if your Android device is affected by this vulnerability. Vulert Playground allows you to analyze your application without requiring access to the code or installation. Simply visit the provided URL and follow the instructions to check for the presence of this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Wifi.
